Method and apparatus for automated reconfiguration of an electric power distribution system with enhanced protection

ABSTRACT

Method and apparatus is disclosed for controlling an electric power distribution system including the use and coordination of information conveyed over communications to dynamically modify the protection characteristics of distribution devices (including but not limited to substation breakers, reclosing substation breakers, and line reclosers). In this way, overall protection and reconfigurability of the distribution system or “team” is greatly enhanced. According to additional aspects of the invention, devices within the system recognize the existence of cooperating devices outside of the team&#39;s domain of direct control, managing information from these devices such that more intelligent local decision making and inter-team coordination can be performed. This information may include logical status indications, control requests, analog values or other data.

RELATION TO PREVIOUS APPLICATION

[0001] This application claims priority to provisional patentapplication Ser. No. 60/119,855 filed on Feb. 12,1999. In addition, thisapplication is a continuation-in-part of application Ser. No. 09/294,588filed on Apr. 20,1999, which is a continuation of U.S. Pat. No.6,018,449 issued on Jan. 25, 2000.

BACKGROUND OF THE INVENTION

[0002] 1. Field of the Invention

[0003] The present invention generally relates to improvements incontrol of an electric power distribution system, and more specificallyto the use of intelligent autonomous nodes for isolating faultedsections of distribution lines, reconfiguring, and restoring service toend customers (circuit reconfiguration), and improving circuitprotection.

[0004] 2. Description of Related Art

[0005] The power distribution systems of this invention are generally oflow to medium-voltage distribution feeders (ranging from approximately 4KV to 69 KV) originating in power distribution substations and leadingto the source of supply for end customers of an electrical supplyutility or agency. Although the electrical principles governingoperation of these feeders are identical to those governing theoperation of the higher voltage generation and transmission systems, themethodologies for building, operating and maintaining the lower voltagesystems are different. These methodologies are dictated by much largerquantities and geographical dispersion of distribution equipment, and bymuch lower quantities of electrical power supplied per mile of circuit.This creates requirements for lower cost, modular, standardizedequipment, which can be installed, operated and maintained with minimallabor and human supervision.

[0006] Failures of the distribution feeder (faults) occur due to downedpower lines, excavation of underground cable or other causes and aretypically detectable by sensing excess (short circuit/overcurrent)current, and occasionally by detecting loss of voltage. In distributionsystems, it is sometimes the case that a loss of voltage complaint bythe customer is the means by which the utility senses the outage,responding by dispatching a crew to isolate the fault and reconfigurethe distribution system. The typical devices for isolating these faultsare circuit breakers located primarily in distribution substations andfuses located on tap lines or at customer transformers. The substationbreakers are generally provided with reclosing relays that cause thebreaker to close several times after the breaker has detected anovercurrent condition and tripped open. If during any of these“reclosures”, the fault becomes undetectable, service is restored and noextended outage occurs. Particularly on overhead distribution lines,temporary arcing due to wind, lightening, etc causes many faults. Thus,the majority of faults are cleared when the breaker opens and service isrestored on the automatic reclose. Alternatively, after some number ofreclosure attempts, if the overcurrent condition continues to bepresent, the recloser goes into a “lockout” state which prevents furtherattempts to clear the fault.

[0007] Other than manually operated switches, most distribution feedershave no other means to isolate a fault between the substation and thefuses, thus any failure of the feeder results in lengthy, costly,inconvenient and potentially dangerous outages. The primary exceptionsto this involve the use of devices known as “line reclosers”,“interrupters” and “automatic line sectionalizing switches” or“sectionalizers”. These are automatically operated devices, well knownto those skilled in the art, and are referred to categorically in thisdocument as “fault isolating devices”. The reader should be aware thatthe term “sectionalizer” refers to a specific family of automatic, faultisolating devices described below, while the terms “sectionalizing” andsectionalize” are used to describe the process of isolating a faultedsection of line, which can be performed by all of the classes ofswitches described above.

[0008] The “line recloser” is typically a pre-packaged, version of thesubstation breaker with reclosing relay. Line reclosers typicallyconsist of a fault-break switching device with integrated currentsensing, plus a control enclosure containing fault detection hardware,control logic, user interface module, and battery-backed power supply.When placed on the distribution line between the substation and customerloads, a line recloser is typically set up with fault detection settingscoordinated to operate before the substation breaker trips and tocorrespondingly prevent the substation breaker from tripping. This hasthe effect of reducing the number of customers affected by an end ofline fault. On very long feeders, the more sensitive settings can beused to protect the feeder from faults of a magnitude too low to bedetected reliably by the substation circuit breaker. Multiple linereclosers can be placed on a distribution line in series, although itbecomes increasingly difficult or impossible to coordinate theirsettings such that only the nearest recloser on the source side of thefault operates.

[0009] The “interrupter” is typically a pre-packaged breaker and faultrelay without automatic reclosing capability. Interrupters are usedprimarily in underground power distribution systems.

[0010] The “automatic line sectionalizer” or “sectionalizer” istypically a prepackaged combination of a load-break switch used inconjunction with a device known as a “line sectionalizer control”. Thesectionalizer senses current (and optionally voltage) such that theoperation of the circuit and the source-side protective device can bemonitored. The sectionalizer is configured to open its switch undercertain circumstances when the circuit is de-energized after some numberof pre-configured voltage losses have occurred within a brief timeinterval. The circumstances vary from product to product, but are alwaysbased upon sensing of conditions caused by faults followed shortly byvoltage losses. Sectionalizers are designed to coordinate with theoperation of the circuit's protective devices. Typical sectionalizersare devices such as the Cooper Power Systems Sectionalizer type GV or GWmanufactured by Cooper Industries, Inc, or the EnergyLine Systems Model2801-SC Switch Control manufactured by EnergyLine Systems. These are allwell-known devices within the industry, and thus need not be describedin detail herein.

[0011] Although utility acceptance of more sophisticated automationsolutions to fault isolation and reconfiguration has been limited, manymethods have been developed and marketed. The most primitive methodshave typically involved placing control equipment and switchgear atstrategic points in the power distribution grid and coordinating theiroperation entirely with the use of circuit parameters sensed andoperated on locally and independently at each point. An example systemof this type is the Kearney FILS system. More sophisticated methods havebeen developed for isolating/reconfiguring these circuits bycommunicating information sensed locally at the strategic points to adesignated, higher level control entity(s). Example methods of this typeare disclosed in U.S. Pat. Nos. 5,513,061 and 5,701,226 (Gelbein) and5,341,268 (Ishiguro). Utilizing intelligent, distributed controlmethodologies, several methods have been developed toisolate/reconfigure distribution circuits without the need for thehigher-level control entity(s). In systems implementing these methods,information is sensed and processed locally, acted on as much aspossible locally, and then shared with other cooperating devices toeither direct or enhance their ability to take action. Examples of thesemethods can be found in U.S. Pat. Nos. 3,970,898 (Baumann) and 5,784,237(Velez), and in a prior version of EnergyLine Systems IntelliTEAM (Reg.T.M.) product and related U.S. patent application Ser. No. 08/978,966(Nelson et al).

[0012] Most of these methods and systems contain significantrestrictions on the power distribution equipment types and topologiessupported. For example, Baumann, Velez, and Gelbein disclosemethodologies tailored to non-fault break sectionalizing switches withbreakers or reclosers only at the sources of supply. Thus, methodologiesfor integrating substation breakers, line reclosers, sectionalizers, andother equipment into generalized, automatic circuit reconfigurationsystems have been limited. There are numerous reasons for this, relatedprimarily to the nature of electric distribution systems:

[0013] 1. Without communication equipment, it is difficult, if notimpossible to coordinate the protective and fault isolation functions ofmore than two or three devices.

[0014] 2. Communication equipment is costly or limited in capability,and the techniques for managing the information flow and sequence ofevents are primitive. This also adds labor to the setup and support ofsuch systems.

[0015] 3. The load density/diversity, differing wire sizes andintermixed construction techniques (overhead/underground) and inherentlyunpredictable loading patterns greatly complicate the automation ofemergency switching decisions.

[0016] 4. Generally, there is more than one alternate source of supply,but the source may have limited capacity to supply the feeder. Thisrequires a more complex decision making process.

[0017] 5. Even when there is only one alternate supply, and that supplyis fortuitously placed at the end of the line, limitations on thecurrent carrying capacity of the main feeder can limit thereconfiguration process.

[0018] 6. The limited training and background of emergency crewsrequires that the equipment be easily operated in both automatic andmanual operating modes.

[0019] 7. The technology of protective relaying and reclosers hasadvanced to incorporate microprocessor-based technologies, and existingreconfiguration system solutions incorporating reclosers do not takeadvantage of the advanced capabilities of the microprocessor governeddevices.

[0020] Examples of recent improvements in recloser technology includethe Form 4 c and Form 5 c Recloser Controls manufactured by CooperIndustries, the SEL 351R Recloser Control manufactured by SchweitzerEngineering Laboratories, Inc. and the N, U, and W Series RecloserControls manufactured by Nu-Lec Pt. Ltd. These products are capable ofinternally maintaining at least two separate sets of protective relaysettings, selectable by the customer at the front panel or overcommunications. These sets of settings can be loosely referred-to as“profiles” of protection characteristics, and may include a wide varietyof selections including operating modes, protection features enabled,and level settings. In the case of the SEL 351R, the capability existsto modify profile settings based upon a procedural language andcommunication with external devices, although the specific methodologyand details of doing this are left to the end user. A key attribute ofthese profiles is the amount of load and distance (or “reach”) down thedistribution line that can accommodated with reliable detection of theovercurrent fault.

SUMMARY OF THE INVENTION

[0021] A primary aspect of the present invention is to providemethodology and related system apparatus for using and coordinating theuse of information conveyed over communications to dynamically modifythe protection characteristics of distribution devices (including butnot limited to substation breakers, reclosing substation breakers, andline reclosers). In this way, overall protection and reconfigurabilityof the distribution system or “team” is greatly enhanced.

[0022] In another aspect of the invention, devices within the system inaccordance with the present invention recognize the existence ofcooperating devices outside of the team's domain of direct control,managing information from these devices such that more intelligent localdecision making and inter-team coordination can be performed. Thisinformation may include logical status indications, control requests,analog values or other data as will be presented below.

[0023] These and other purposes and advantages of the present inventionwill become more apparent to those skilled in the art from the followingdetailed description in conjunction with the appended drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

[0024]FIG. 1 shows a conventional distribution system in which nodes inaccordance with a presently preferred embodiment of the invention havebeen installed.

[0025]FIG. 2 is a block diagram of a node of a preferred embodiment ofthe present invention.

[0026]FIG. 3 is a flow chart showing the synchronization and errorchecking routine employed by the embodiment of FIG. 2. This routine iscalled by various other portions of the system flow diagram and updatesthe clock and counters used to synchronize the system.

[0027]FIG. 4 is a flow chart showing the synchronization process stateof employed by the embodiment of FIG. 2. This routine coordinates thetransmission of the database among the nodes.

[0028]FIG. 5 is a flow chart showing the integrity check state employedby the embodiment of FIG. 2. This routine checks the database, errorflags, and system state to ensure that the node is operating correctlyand the data is reliable.

[0029]FIG. 6 is a flow chart showing the transfer process state employedby the embodiment of FIG. 2. This routine closes open switches after afault occurs in order to restore service to as many users as possible.

[0030]FIG. 7 is a flow chart showing the return to normal process stateemployed by the embodiment of FIG. 2. This routine returns the nodes totheir normal state once a fault has been cleared.

[0031]FIG. 8 is a flow chart showing the end process timer task employedby the embodiment of FIG. 2. This routine is called by either thetransfer process state flow chart or the return to normal flow chart andsets a timer to ensure that the performance of these tasks does notexceed a predetermined time duration.

[0032]FIG. 9 shows an alternate configuration of a distribution systemwhich places additional restrictions on the ability of the alternatesource to supply power, and flow chart for supporting the configuration.

[0033]FIG. 10 shows an alternate configuration of a distribution systemwith improved fault isolation capabilities, and flow chart forsupporting the configuration.

[0034]FIG. 11 shows a logical block diagram of an alternative embodimentof node controller 200, in which the circuit reconfigurationintelligence is contained in an add-on microprocessor board.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT

[0035] The present invention comprises novel improvements to a methodand system for controlling an electric power distribution system. Thefollowing description is presented to enable any person skilled in theart to make and use the invention, and is provided in the context ofparticular applications and their requirements. Various modifications tothe preferred embodiment will be readily apparent to those skilled inthe art, and the generic principles defined herein may be applied toother embodiments and applications without departing from the spirit andscope of the invention. Thus, the present invention is not intended tobe limited to the embodiment shown, but is to be accorded the widestpossible scope consistent with the principles and features disclosedherein.

[0036]FIG. 1 shows a simplified view of a portion of an exemplaryelectrical power distribution system that can be controlled by apreferred embodiment of the present invention. The distribution systemcomprises a plurality of sources of electrical power 102 connected to aplurality of users 104 (e.g., factories, homes, etc.) through anelectrical distribution line 106 such as conventional electrical powerlines. Distribution line 106 has a plurality of nodes 108 placed atpredetermined points along the line 106. The depiction of the number ofsources, users, lines and nodes in FIG. 1 is arbitrary and there may bea different configuration or number of each of these components in anygiven distribution system.

[0037] In addition, while the system disclosed in U.S. PatentApplication 08/978,966 is well suited to making decisions based upon thelocal configuration of, and sensed conditions on the main distributionline, the present invention enables devices within the system team torecognize the existence of auxiliary or “sideline” devices (for example,130A and 130B) outside of the team's domain of direct control, activelymaintaining information from these devices such that more intelligentlocal decision making and inter-team coordination can be performed.Correspondingly, devices within the team may be configured to supplyinformation over communications channels, (for example, 131A and 131 B)as sideline team members of other teams. This information may includelogical status indications, control requests, analog values or otherdata. FIG. 2 depicts a presently preferred embodiment of a node 200 inaccordance with the invention. Distribution line 202 passes throughswitch 204 which can open and close the distribution line at this point.In other embodiments of the invention, the switch 204 can be replaced byother devices capable of performing power sensing, control orconditioning functions such as voltage regulation (voltage regulators)reactive power control, (switched capacitor banks), fault sensing, etc.

[0038] It will be appreciated that consistent with the presentinvention, the node 200 may also be of a type for controlling two(dual), three, or more switches, with customer loads or alternatesources between the switches. In this case, the distribution line 202would pass through two or more switches 204 which can open and closeindependently under the control of the single node 200. In this context,node 200 is a single node from the standpoint of communications, but ismultiple nodes from the standpoint of the power system and the controlalgorithms of the present invention. In this circumstance, theinformation flow is unchanged, but the communication step is simplybypassed.

[0039] Node controller 206 controls distribution switch 204. Nodecontroller 206 includes a control computer 208, a display 209, and anassociated memory 210. Memory 210 stores the programming to control thenode and stores the database of node records about each node in thesystem. A significant feature of the present invention is the additionof information elements 17-18 in the node records 210 to reflectprotective characteristics of the node as explained below.

[0040] A significant feature of the present invention relates toenhancements to team operation when node 200 has protective (overcurrentprotection/fault break) capabilities. Those skilled in the art willrecognize that distribution switch 204 can have different operatingcapabilities which may enhance or detract from its ability toparticipate in circuit reconfiguration. For example, the lowest-costswitches may not be capable of interrupting high currents, or may not beoutfitted with both voltage and current sensors. Those skilled in theart will also recognize that node 200 may be programmed not to open theswitch under high interrupting currents (sectionalizing switch control),or alternatively may be programmed as a “circuit protective device”(recloser or breaker). When programmed as a protective device, theswitch is opened under overcurrent conditions (fault current) to preventfire or damage to the circuit or to customer equipment, and also forsafety concerns.

[0041] It is a primary aspect of the present invention to providemethods and apparatus having generalized algorithms (see generally FIGS.3 and 6-8) for using and coordinating the use of information conveyedover communications to dynamically modify the protection characteristicsof distribution devices (including but not limited to substationbreakers, reclosing substation breakers, and line reclosers). In thisway, overall protection and reconfigurability of the distribution systemor “team” is greatly enhanced. These modifications vary in scope fromadjustments in protection settings or feature selections to redefinitionof the device capabilities. For example, under certain circumstances,the automated control methodology can redefine the role of a linerecloser into a line sectionalizer or into an entirely non-automaticswitch to reduce problems with coordination between multiple protectivedevices. Since the algorithms are applied dynamically, there is no needto customize the procedural operation for each circuit configuration.Since each device automatically recognizes its role within the team,coordination of the protective devices is greatly facilitated by theimprovements detailed below.

[0042] Control computer 208 is connected to AC waveform processor 212.AC waveform processor 212 is connected through field interface connector214 to distribution line 202. This allows the processor to measurevarious critical parameters of the electricity on the distribution linesuch as, voltage and current, digitally convert them, and send them tothe control computer for processing, communications, or storage inmemory.

[0043] Digital I/O interface 216 is connected to control computer 208,switch 204 and distribution line 202. Digital I/O interface 216 allowscomputer controller 206 to receive switch position sensing informationand other inputs, and to output control outputs to the switch.

[0044] Communications device 218 is connected to control computer 208and allows it to communicate with other nodes on the system throughcommunications channel 110 of FIG. 1. The communications devices can beconnected to any communications network that is conveniently availableand has the desired characteristics. In a current embodiment of theinvention, a Metricom Radio is used.

[0045] A second, optional, communications device 220 can be included inthe node, if desired, for use by systems other than the presentinvention. An example of this would be a SCADA gateway.

[0046] Power is supplied to the node through power supply/battery backup222. The battery can be charged from solar power, an AC potentialtransformer, or from power supplied through the voltage sensors.

[0047] Each of the nodes is connected to a communications channel 110.Any type of communications channel can be used. In the presentinvention, for example, the communications channel could be telephone,radio, the Internet, or fiber optic cable.

[0048]FIG. 3 is a flow diagram which illustrates the operation of asynchronization counter and state selection process run by each node inaccordance with the presently preferred embodiment. In this process thenodes update their timer and database sequence counter which are used tosynchronize the nodes with each other. The nodes then check for errorconditions and set error flags if errors are found and determine fromtheir database which state they are in: synchronization, integritycheck, or reconfiguration event. An enhancement to the synchronizationprocess is the addition of step 315 to provide protective devices with“advance notice” of their protective characteristics prior to areconfiguration even such that initial restoration of the circuit maybegin prior to adjustment of protective device profiles if the priorsettings are adequate.

[0049]FIG. 4 is a flow diagram which illustrates the operation of thesynchronization process state run by each node in accordance with thepresently preferred embodiment. In this state the nodes construct adatabase of critical control information about the distribution system.All nodes contribute to the construction of a database. Each node storesin its memory a copy of the database. The steps in constructing thedatabase in accordance with the presently preferred embodiment are asfollows: each node receives the database from the previous node, addsits own record of information and passes the database on to the nextnode. This process continues until all nodes have received a record fromevery other node. Once this process is compete, each node then proceedsto the integrity check state shown in FIG. 5

[0050]FIG. 5 is a flow diagram which illustrates the operation of theintegrity check state process run by each node in accordance with thepresently preferred embodiment. When a node runs this process, it checksthe records it has received from all the other nodes to ensure that therecords reflect a timely version of the state of the system.

[0051] FIGS. 6 is a flow diagram which illustrates the operation of thetransfer process state in accordance with the presently preferredembodiment. This flow diagram describes the process used by each nodeupon the occurrence of a fault in the system followed by standalonesectionalization. This process is also started in a node when the nodereceives a message that another node has entered this process. In orderto restore electric power service to as many users as possible after afault has occurred, each node will use this process to determine if itcan close its associated switch(es). The present invention extends thefunctionality of the transfer logic to insure that the protectionsettings match the requirements of the transfer (steps 645-654).

[0052]FIG. 7 describes the logic used by each node to return thedistribution system to its normal state once the fault has been cleared.The present invention extends the functionality of the return-to-normallogic to insure that the protection settings match the requirements ofthe return-to-normal transition, particularly when the “closed”transition is used (steps 722 and 750-752).

[0053]FIG. 8 is a flow diagram which illustrates the operation of a tasktimer that is used during the transfer process state of FIG. 6 and thereturn to normal process state of FIG. 7 in order ensure that the systemdoes not take too much time to complete the steps required in either ofthese processes. The present invention extends the functionality of thereturn-to-normal logic to reset the protection settings when thereturn-to-normal transition, and in particular when the “closed”transition return-to-normal is used (steps 830-831).

[0054] Management of the Team Database

[0055] As mentioned above, memory 210 stores the programming to controlthe node and stores a database of node records about each node in thesystem (team database). Each record includes a number of fields whichinclude information that allows the node controller to control thenode's switch(es) to alter the distribution line characteristics inresponse to distribution system demands. A major improvement in thepresent invention is the addition of protective characteristics to theteam database, facilitating coordination of protection settings duringload transfer/restoration.

[0056] In a preferred embodiment of the invention the ordering of thenode records in the database corresponds to the physical ordering of thenodes in the distribution system. It would not deviate from the presentinvention to have the node records in the database ordered in some otherfashion and to include information in each node record of the node'sactual or relative physical position in the distribution system. If thenode controller is of a dual or multiple switch type, the position ofeach switch is represented in the database and may be orderedindependently.

[0057] In another embodiment of the present invention, a single, dual ormultiple switch node from the standpoint of communications can be usedas the only member of the team. It will be seen that doing so iscompletely consistent with the preferred embodiment of the invention. Adual switch node may act as the only member of the team when it is theonly member physically installed (other members may be installed later),when other members of the team have been temporarily removed from theteam, or when errors at other nodes in the team prevent the entire teamfrom acting upon an outage condition.

[0058] Also, a preferred embodiment of the invention is for controllinga loop distribution system as in FIG. 1 in which there are two sourcesand a normally open switch (a “tie” switch) in the distribution linebetween the two sources, or a radial distribution system in which thereis one source and no tie switch. It would not deviate from the presentinvention for the database to represent simpler or more complexdistribution system topologies and for the invention to be able to workon such topologies.

[0059] In the preferred embodiment, the tie switch can close to restoreload (backfeed) from either side, depending on which side of the switchis energized and which side is deenergized. As a convention, the circuitis described as having a “right” side and a “left” side, with the tieswitch between the right and left sides. The lowest numbered node isdesignated as being closest to the source on the left side of thecircuit, and the highest numbered node as being closest to the source onthe right side. The circuit traversed between each of two adjacent nodesis referred to as a “transfer segment” or “segment”.

[0060] In the preferred embodiment of the invention, each node'sdatabase record includes: (1) record currently in use flag, (2)indication of the type of device represented by each individual record,(3) the node's communication address, (4) its normal switch(es) state(s)(open or closed), (5 present switch(es) state(s), (6) the voltage state(is voltage present on the line or not)(by position if applicable), (7)the fault state (has a fault been detected)(by position if applicable),(8) the present time stamp (9) the database sequence number, (10) thelogic process state (what state and step is the switch in), (11) errorcondition status flags, (12) automatic/manual operation mode status (byposition if applicable), (13) average of the sensed loads on each phase(by position if applicable), (14) time stamp at start of event process,(15) indication of method of return to normal (open or closedtransition), (16) indication of whether the node was within the affectedportion of the circuit, (17) maximum number of segments that can beadequately protected with the current protective settings when feedingthe circuit from the left side, and (18) number of segments that can belikewise protected when feeding the circuit from the right. For thepurposes of this invention, a segment (see items 17 and 18 above)represents the distribution line between two adjacent team nodes ofFIG. 1. In the case of a single communication node containing dual ormultiple switches, the number of segments counts the load between anytwo switch positions along the main distribution line as an additionalsegment. The “maximum number of segments” is obtained using amethodology outlined below. It will be appreciated that in otherimplementations of the invention different node data may be stored inthe database record for each node without departing from the scope ofthe invention

[0061] The team local record database (above) allows each node to haveenough information about the state of the distribution system tointelligently control its local switch. Additionally, since the databaseis locally stored in the node, the node need not ask other nodes forinformation or wait to receive operating instructions from other nodes.

[0062] It will be appreciated that consistent with the present inventionthe record currently in use flag can be used to remove a node fromcoordinated system activities or allow a node to resume coordinatedsystem activities. The decision to remove or resume activity of a nodemay be made by, but is not limited to an external decision makingentity, or by the node itself.

[0063] Protection Profiles and the Team Database

[0064] A significant improvement in the preferred form of the presentinvention is the representation of additional attributes in theprotective device profiles. These attributes enhance the ability of theprotection engineer to convey the intended operating range or purpose ofthe settings to the team nodes. In addition, these attributes supportadditional, team-related functionality not otherwise represented in theprotection settings of the individual device as will become clear below.The attributes are: (1) “Profile Type” Indicates the intended use ofthis profile. For the preferred implementation, the possible values are:(a) “Team Mode/Normal” for use when the nodes are in their normaloperating state, with the normally open switch open, and all othersclosed. In the preferred embodiment, there is only one Team Mode/Normalprofile, although it would not deviate from the scope of this inventionto have multiple profiles, selected dynamically based upon operatingparameters such as the season of the year or load-based criteria. (b)“Team Mode/Transfer” for use in circumstances where additional segmentsor load must be picked up or carried at this device and the normalprofile is inadequate. There may be multiple Team Mode/Transferprofiles, selected for use based upon various selection criteriadiscussed below. (c) “Standalone” when team operation is not enabled, oris temporarily disabled due to persistent errors or problems (these arereferred to below as “Stop Transfer” conditions). (d) “Team Mode/Returnto Normal” for use during a “return to normal” team operation (seebelow). (2) “Number of Segments, Left-Side Distribution” Indicates themaximum number of additional segments, beginning at the local switchposition, that can be protected by the profile when power is being fedfrom the left hand side of the circuit. This number may assume a valuegreater than the direct reach of the device if the system includes otherprotective devices with profiles that protect the end of line. In thiscase, if the other devices are team members, one of the features of thepresent invention is to maintain consistency among the profiles. (3)“Number of Segments, Right-Side Distribution”: As above, but for powerfed from the right side. (4) “Maximum Load” Indicates the maximum amountof customer load that the profile is intended to protect. This value istypically predefined by the user and compared against real time loaddata to insure that the profile is not used in circumstances where falsetripping of the protective device could occur. (5) “Protection SelectionKey”: This is an index or internal pointer to the actual configurationsettings associated with the profile. This index allows theuser-specified entries to be linked to a collection of device settingseither preloaded in the device or maintained as a separate database.Those skilled in the art will be able to appreciate other attributes andattribute values that could be used to characterize the configuration ofprotective device settings.

[0065] It is an object of the present invention to enable team membersto decide whether or not the protective settings of other team membersrequire adjustment before additional load can be picked up by closingopen switches. Thus, the “number of segments” fields in the local recordmust be locally determined and shared between team members. This processtakes place periodically during normal operation whenever the teamdatabase is exchanged (“sync” process, FIG. 3, Step 315). A more complexprocess is involved in determining the values for the fields duringerror processing and/or transfer events and is discussed below.

[0066] Calculating the “Number of Segments” Field-Normal Operation

[0067] The discussion below identifies the way that the “number ofsegments” fields are calculated for the presently active profile duringnormal team operation exclusive of transfer and return-to-normal eventsor error handling. In the preferred embodiment, protective devicesoperate without team-invoked changes to their operating profiles unlessa transfer or certain error conditions are present. It would not deviatefrom the scope or intent of this invention if changes to the activeprofile were made and coordinated throughout the team based uponseasonal variations, load or other sensed or conveyed information.

[0068] There are many possible ways for deriving the “number ofsegments” fields in the local record of the team database based on thetype and capabilities of the device. The preferred embodiment uses thefollowing methodology based upon the switch and control's inherentcapabilities:

[0069] Sectionalizing Switch: On initialization, the number of segmentsthat can be protected is set to an indefinitely large number. When theteam database or local record is transferred (during synchronization orduring a transfer event), the count is reduced to the number of segmentsprotected by the sectionalizer's source-side nearest adjacent node,decremented by one. For example, for the local record corresponding tothe second node, if the first node can protect three segments on itsload side when power is distributed from the left (left-side segmentcount), and the second node is a sectionalizing switch, it sets itsleft-side distribution segment count to two. If the third node's localrecord indicates that it can protect two segments beyond its positionwhen power is distributed from the right, the sectionalizing switch atnode two sets its right-side segment count to one. Special provisionsmust be made for the first node (left-hand distribution) and last node(right hand distribution), since they have no source side nodes. Threeoptions are supported in the preferred embodiment for conveying thesource-side segment count to the terminal (preferred and alternatesource) nodes: (a) the count can be predetermined (configured) basedupon worst-case loading protection studies for the circuit as seen bythe source side protective device, (b) it can be predetermined to anarbitrarily high value (to defeat the prevention of additional circuitloading based upon inadequate segment count), or (c) it may be acquiredover communications from the source side protective device (see sidelineteam member functionality below). The provisions above also apply whenthe terminal nodes are protective devices rather than sectionalizers(see below).

[0070] Protective Device (Recloser or Breaker): Based on the protectivesettings of the device and the sophistication of the control, the numberof segments may be configured or dynamically calculated based in part onthe capabilities of the node as described below.

[0071] In the preferred embodiment, the breaker or recloser's activeprofile attributes are used in the derivation of the “number ofsegments” fields in the node's local record. The number of segments iscalculated as the lesser of the number of segments protected by thesource-side adjacent node (minus one), or the number of segments thatcan be protected based on the local device's active profile (the profilecurrently in use). In the later case, the most-recent load data storedin the team's local copy of the team's database is used to determinewhether or not the potential, calculated load (based on real-time loaddata) corresponding to the number of segments handled by the profileexceeds the maximum load configured for the profile. If it does, the“number of segments” for the profile is reduced until the load can behandled. The logic for making this calculation must be sensitive to theload measured locally, as well as to the direction of present currentflow (left or right), and the present measured load of each individualsegment on the opposite side of the normally open switch. For example,for calculation of the number of segments for left hand distribution, ifthe count extends the protection one segment beyond the position of thenormally-open switch, the measured circuit load at the switch to theright of the normally open switch would be added to the locally measuredload for comparison with the profile. It will be appreciated by thoseskilled in the art, that the reduction of segments based upon load canbe defeated if the end user configures an arbitrarily high value of theload current that can be carried through the node with the specifiedprofile.

[0072] Selecting Profiles During Load Transfer or Error Processing

[0073] This process is invoked whenever the number of segments handledby the presently active profile is recalculated during a load transfer,return-to-normal, or error processing or recovery event. Updates to theteam database during these events trigger a profile search/selectionprocess. The process identified below is a simplified approach forselecting the appropriate profile, although it would not deviate fromthe scope of this invention to use a more elaborate process based oncalculations of line impedance, line loading or other factors, or totrigger the selection process based on different events.

[0074] In the preferred embodiment, the events that trigger theselection process are: (1) Completion of a synchronization interval (seebelow) with no errors and a transition of the circuit configuration intoits “normal” state, with all switches in their correct normally closedor open positions. This event causes the “Team Mode/Normal” profile tobe selected. (2) Transition to a team “stop transfer” condition whichcauses selection of the “Standalone” profile, assuming the last knownconfiguration of the circuit was such that all switches were in theirspecified “normal” positions. (Note: Other errors do not alter theselection of the presently active profile.) (3) Transition to the“return to normal” state (see below) causes selection of the “TeamMode/Return to Normal” profile. (4) During a transfer event (see below),detection that a transfer is in progress, and the maximum number ofsegments that the local switch will have to handle is greater than thenumber handled by the presently active profile.

[0075] In this latter circumstance, in the preferred embodiment, thenode scans through the list of “Team Operation/Transfer” profilessearching for the first entry that can carry the maximum number ofsegments and pre-fault operating load. This allows the profilereselection process to occur at most, only once during typicaltransfers. It would not deviate from the scope of this invention toprovide the nodes with additional information during the notificationprocess regarding the location of the fault such that the profileselection could be more closely matched to the requirements. Inaddition, it would not deviate from the scope of this invention for theselection process (and associated communications) to be carried out eachtime a segment was picked up.

[0076] If the selection process above results in the need to change theactual protection settings or operating mode of the protective device,the change is initiated and verified. Only after positive verificationis the local record in the team database updated. If the verificationfails, an error condition is generated, and the logic reattempts theselection. If a transfer is in progress, this is repeated indefinitelyuntil the transfer process times out.

[0077] Free Running Counter

[0078] Steps 310 to 318 of FIG. 3 comprise a synchronization routinethat is often called by steps in other processes run by a node,especially when a node is waiting for a specified event to occur. Instep 310 the node's free running tenth counter is incremented. A freerunning counter is used to establish a reference for time stamped logic.As will be seen shortly, these counters are used to ensuresynchronization among the nodes. In step 312 the node checks the freerunning counter to determine if it has reached its maximum. When themaximum count is reached, the synchronization interval expires. If thesynchronization interval has expired then step 314 is executed and thesequence number for the database recorded by the node is incremented anda time stamp is recorded in the node's database to help ensuresynchronization. As an improvement provided by the present invention, atstep 315 the preferred embodiment also calculates/recalculates the“number of segments” fields for both right hand and left handdistribution using the methodology shown above. The database sequencenumber is increased by one count on each synchronization interval andeach node includes the database sequence number in its local record.

[0079] The database sequence number at each node should be the same ifall of the nodes are properly functioning and synchronized. Therefore,the inclusion of each node's database sequencing number in its recordallows nodes in the present invention to be certain that the data beingreceived from other nodes is timely and reliable. In this way each nodecan ascertain for itself whether the system as a whole is functioningproperly.

[0080] After step 314, or if the synchronization interval has notexpired then the node checks to determine if communications are allowed.Communications will be prevented in certain situations. An example ofwhen communications are not allowed in a preferred embodiment is when ateam of nodes is initially being configured, all other nodes must besilent except for the node distributing the configuration information.If communication is not allowed for the node, then the node returns tostep 310 and is in effect on its own for the moment.

[0081] If communication is allowed then step 320 is executed. The nodewill check for errors and events and set a flag if an error or event isdetected. Then each node determines which of three states it is in:synchronizing, integrity check, or reconfiguration event. Each nodedetermines on its own, independently of the other nodes, which of thethree states it should be in based on its own internal sensors and thedatabase records that it has received from the other nodes. Typically,all nodes will be in the same state unless the system is transitioningfrom one state to another. However, any particular node can only be inone state at a time.

[0082] Synchronization Process State

[0083] If the node is in the synchronization process state then itfollows the process illustrated by the flow chart in FIG. 4. At step412, the node must determine if it is the first active node. In apreferred embodiment of the invention the node just after either sourcecan be configured to be the first active node in the database and theother node would be the last active node in the database. The nodes inbetween would be ordered in the database to reflect their physicalordering in the distribution system. It would not deviate from thepresent invention to have the nodes ordered in the database in an orderother than their physical order and to include data in each node'srecord that allows the node's absolute or relative physical ordering tobe determined.

[0084] The first node will proceed to step 414 and will start theprocess of constructing the database of records for the nodes. The firstnode will put its local record in the database and then send thedatabase to the next node listed in the database. This database iscalled the “ball” as it is sent around the system from node to node. Therecord added to the database by each node contains the 18 items ofinformation listed above for the currently passing node.

[0085] Although there are many possible ways that this database could beconstructed and communicated, the present incarnation of the inventionconstructs the database by sending it to each successive node to havethat node's record added onto the database. The database could beconstructed in other ways without deviating from the present invention.For example, each node could simply broadcast its record on thecommunications channel for reception by all other nodes.

[0086] The first node will then continue on to step 418, and since thenode has not yet received the ball twice, it will continue on to step420. In step 420, the node determines if it is time to exercise itslink. A node exercises its link by signaling another node to signal itback. This allows a node to determine if its communications system isworking. To determine if it is time to exercise its link, a node checksthe synchronization interval timer to determine if the synchronizationprocess has taken more than a predetermined used defined period of time.This prevents the node from getting stuck in this state if there is acommunications failure.

[0087] If it is not time to exercise the link, the node next goes tostep 422. In this step the node executes steps 310 to 318 of FIG. 3 andchecks for errors and events. If an error or event is detected, a flagis set and, if necessary, the process that is active is ended. This iscalled a “synchronization and error checking loop.” Once this iscompleted, the node returns to the synchronization process and proceedsto step 424 and checks to determine if it has received the ball. Whenthe synchronization process is run by nodes other than the first node,they go from step 412 directly to step 424.

[0088] At step 424, if the node has not received the ball, it willreturn to step 420 and continue this cycle until it is either time toexercise the link or the ball has been received. If the ball is receivedthen the node goes from step 424 to step 426. At step 426 the nodeincludes its local record with the ball and sends the ball on to thenext device. (The last listed node will send the ball to the firstlisted node.) The node proceeds to step 418 and checks whether it hasreceived the ball twice. If not, then the node proceeds to step 420again and continues in that loop.

[0089] When the ball is received the second time, the node goes fromstep 424 to 426 to 418 and then to step 428 and schedules a linkexercise message to another node in order to test the communicationslink to ensure that it is working. This is the same step the node jumpsto if the time to exercise the link counter in step 420 expires.

[0090] After the node has exercised its communications link in step 428,the node goes to step 430 and checks the integrity check counter todetermine if it is time to enter the integrity check state asillustrated by the flow chart in FIG. 5. If it is not yet time for thenode to enter the integrity check state, then the node will proceed tostep 432 where it performs a synchronization and error checking loop.The node then cycles back to step 430 and will continue this loop untilit is time for an integrity check.

[0091] In a preferred embodiment of the invention, the synchronizationprocess occurs once per predetermined interval. The length of thepredetermined interval is based on the number of nodes in the system.This interval could be larger or smaller, or based on something otherthan the number of nodes in the system, without deviating from thepresent invention.

[0092] Thus, the synchronization process illustrated by the flow diagramin FIG. 4 periodically updates the information in each node's database.This process allows each node to contain up to date information on thestatus of all the other nodes.

[0093] Integrity Check State

[0094]FIG. 5 shows the flow chart which illustrates a process employedfor the integrity check state. In this state, each node checks to ensurethat the database records contained in its memory appear to besynchronized, that there are no error conditions, and that the nodes arein the correct states. In step 512 the node checks the database sequencenumbers to ensure that they all match. In this way, the node can ensurethat the records in the database from each node are all from the samesynchronization process.

[0095] If the sequence numbers do not match, then the node goes to step514 and a flag is set for the sequence numbers to be reset tore-synchronize them. This error flag will prevent any coordinated teamactivities from taking place until another synchronizing interval hastaken place and the database sequence numbers match.

[0096] If the sequence numbers match, or after the flag has been set instep 514, the node then continues on to step 516. In this step, the nodechecks each of the database records to ensure that they were all timestamped within one second of each other. This requirement ensures thatthe records in the database accurately reflect a picture of the systemat roughly one point in time. If the records are not time stamped withinone second of each other, then the node goes to step 518 and sets a flagfor a new time stamp. This flag will not allow synchronized teamactivities if the time stamps are out of synchronization with each otherby more than a predetermined amount set by the user. In one embodiment,if the time stamps are 5 seconds out of synchronization then an errorflag is set. It will be appreciated that the allowable discrepancy ofthe time stamps is an implementation dependent parameter.

[0097] In the preferred embodiment of the invention, this strictimplementation of the integrity check could be considered a “safe mode.”It will be appreciated that consistent with the present invention othermodes may exist that would allow the continued operation of teamactivities even with various levels of integrity check failures.

[0098] If the time stamps are not flagged as being out ofsynchronization, or after the flag has been set in step 518, the nodethen proceeds to step 520. In this step, the node checks for stoptransfer errors, and if any exist, it tries to determine if the errorcan be cleared. Examples of errors are: (1) an out of synchronizationerror in which the database sequence numbers for the nodes do not match,and (2) a reconfiguration process occurred and was unable to be fullycompleted due to external conditions such as a malfunctioning switch.

[0099] If the error can be cleared then a flag is set in step 522 forthe error to be cleared. The node then continues on to step 524. In thisstep, the node determines if it is all ready for transfers. After areconfiguration event, the node must make sure that all of the nodes aresynchronized and that other necessary conditions are met. For example,in one embodiment, the node checks its database to determine if all ofthe nodes have an average 3 phase load that is within a predetermineduser defined limit. If the node determines that it is all ready fortransfer, then it will go to step 526 and set a flag indicating that itis all ready for transfer.

[0100] Next, the node goes to step 528 to determine if it is in thecorrect ready state. Each node can be either ready for a transferprocess or ready for a return to normal process, and all nodes should bein the same ready state. In this step, the node will compare which readystate it thinks it should be in based on its local information and thestate that other nodes are in based upon information in the database. Ifthe node is not in the correct ready state then it goes to step 530 anddetermines the correct ready state and changes to it.

[0101] The node then proceeds to step 532 where it checks to determineif there is a return to normal mode mismatch. In this step the nodechecks to make sure that all of the nodes are set to the same return tonormal mode: open transition, closed transition, or function disabled.If all the nodes are not set to the same return to normal mode, then,there is a mismatch and at step 534 an error flag is set. Next, the nodereturns to step 310 in FIG. 3.

[0102] Transfer Process State

[0103] The transfer process state flow diagram of FIG. 6 will bedescribed with the aid of a simple example. Referring to FIG. 1, assumea fault develops in distribution line 106 between nodes 108A and 108B.As described above, typical electrical distribution systems will haveeither a breaker or a recloser (reclosing breaker) at the source ofsupply for safety and for protection of the circuit. Utilizing thesystem disclosed in U.S. patent application Ser. No. 08/978,966,sectionalizers may be placed at switch locations 108A-F as shown in theFIG. 1. The “sectionalizer” described here is based on the EnergyLineModel 2801, with additional features added to support operation under apreferred embodiment of the invention. The standard sectionalizer logicwill open (trip) the switch if: 1) its sectionalizing logic is enabledand the device is operational, 2) a pre-configured number of voltagelosses (typically 1-3) on all sensed phases have been counted within abrief time period (typically 45 seconds), 3) an overcurrent conditionwas sensed just prior to the first voltage loss, and 4) the switch ispresently closed. An additional option in the conventional softwareallows the switch to trip if voltage, sensed on all three phases,becomes grossly unbalanced, and remains unbalanced continuously for aconfigured time period (typically 30 seconds).

[0104] It will be appreciated that consistent with the present inventionthe “sectionalizer” described here may be one of many types, includingbut not limited to multi-switch operators, fault interrupting switches,and air-break switches, without deviating from the intent of the presentinvention. For the purpose of this example, the single switchsectionalizer described here will be used.

[0105] An optional feature that can be provided in a preferredembodiment of the invention causes the switch to open on a configuredcount of voltage losses even if a fault was not sensed just prior to theloss of voltage. This allows the first step of isolating both sides ofthe faulted section of line to be executed immediately withoutcommunication to other devices. Another optional feature causes theconfigured count on voltage losses (subsequent to sensed faults) to bedynamically calculated locally based upon the position of the switchrelative to the presently designated open tie switch. Configurationparameters allow this dynamically calculated range of counts to befurther constrained by the user to always fall between a minimum andmaximum number. Another option allows the switch to open after a singleextended voltage loss. Finally, the counting of faults followed byvoltage losses can be configured to count each event as a faulteither: 1) if the first voltage loss was preceded by a fault, or 2) ifall voltage losses were preceded by faults.

[0106] Another unique feature of a preferred embodiment of the inventionis its modified one-shot-to-lockout capability. If a switch is closed aspart of any automatic operation (or manually closed by a humanoperator), some sectionalizers, including the EnergyLine Model 2801-SC,can be configured to automatically re-open the switch if a voltage lossis detected during a brief interval following the operation (typically 5seconds). A preferred embodiment of the invention has the additionalcapability to avoid opening the switch until two counts of voltage losshave been detected. This becomes a benefit when the circuit's breakerreclose pattern includes an initial instantaneous close operationfollowing a trip operation due to a fault.

[0107] Those skilled in the art will recognize that consistent with theuse of automatic line sectionalizers at each switch location, recloserscould also be substituted such that the switch was opened/operated oneor more times under load to clear the fault. Although this would requiremodifications to the prepackaged, commercially available recloserproducts to support the team coordination functions, comparablefunctionality to that provided by the sectionalizer could be achieved.It should also be noted that a variation of the one-shot-to-lockoutcapability implemented in the sectionalizer implementation is availablein many reclosers as the “block reclose” option. The challenge with theapproach of substituting reclosers for sectionalizers, as mentioned inthe introduction, would be to coordinate the protective settings ofthese reclosers to prevent excessive switching or tripping/lockout ofthe wrong device. It is an object of this invention to provide the meansto minimize or eliminate this possibility. If the power distributionsystem of FIG. 1 contains an automatic sectionalizing device, then afterthe fault occurred between nodes 108A and 108B on distribution line 106,the device, depending on how it is configured, would cause switches inany one or all of nodes 108A, 108B and 108C to open causing all users104A, 104B, and 104C that are down stream from an open switch to loseservice.

[0108] In one implementation of the invention, the sectionalizing logicwill be set up to open all switches between the fault and the normallyopen tie switch 108G. This allows the present embodiment of theinvention to reclose switches one at a time to gradually increase theload seen by the distribution system to aid the system in resumingservice to users. Once any node has finished sectionalization the nodeenters the transfer process state illustrated in flow diagram of FIG. 6in which a node will attempt to close its switch. Also a node will enterthe transfer process when it receives a communication that another nodeor team of nodes has entered the transfer process.

[0109] Without departing from the present invention, the transferprocess state could be initiated by an event other than finishingsectionalization. Depending on the type of distribution system and itsneeds and characteristics, it may be desirable to have other eventstrigger the system into action. For example, it may be desirable to havethe system triggered into action by detection of a serious under or overvoltage condition.

[0110] Each node is continually updating the record in its databaseconcerning its own status information. Thus, while the records in thedatabase concerning all other nodes, the ball, is sent to each node onlyin the synchronization process state, each node maintains an updatedrecord on its own status.

[0111] For the purposes of this example, assume that sectionalizationhas caused the switches in nodes 108A, 108B, and 108C to open resultingin users 104A, 104B, and 104C all losing service. Once sectionalizationhas ended, each of the three nodes 108A, 108B, and 108C willindependently begin the transfer process state, because they each haveundergone standalone sectionalization.

[0112] When a node enters the transfer process state depicted in theflow chart of FIG. 6, the node executes step 612 and starts the endprocess timer task. This timer ensures that the nodes do not spend toolong trying to complete the task. Should something prevent the node fromcompleting the task in the allotted time, the timer will end thetransfer process state. Each node will use the same start time for itstimer as the node that first initiated the transfer process. In thisway, all nodes in the transfer process will “time out” at the same time.The operation of this timer and the task it calls are shown in FIG. 8and will be discussed below.

[0113] The length of the timer can be set by the system operator to meetthe needs of the particular system being controlled. For example, toensure the safety of repairmen working on the power lines after a faulthas occurred, the timer could be set to remove the nodes from thetransfer process a known period of time after the fault occurred. Inthis way, even if the conditions in the transfer process state are metwhich would have allowed a switch to close and energize a power line,repairmen who have begun to service the system are not put in dangerbecause the transfer process has timed out and the switch will notclose.

[0114] In a preferred embodiment of the present invention, each of thesethree nodes enters the transfer process on its own, triggered by its ownlogic, stored data and sensor readings. The presently preferredembodiment of the invention does not require central control,communication, or approval for any of the nodes to enter this state.

[0115] Once the timer has been started, the node proceeds to step 616and determines if the switch it is controlling is closed during thenormal operation of the distribution network. Referring to FIG. 1,switches 108A, 108B, 108C, 108D, 108E, and 108F are closed during normaloperation of distribution system, and switch 108G, a tie switch, is openduring the normal operation of the system. Since switches 108A, 108B,and 108C are each normally closed during the operation of the system,these nodes will continue on to step 618. At step 618 each of the nodesthat has entered the transfer process state will transmit its updatedrecord to the next active node listed in the database and the previousactive node listed in the database. These two nodes are called the“nearest neighbor” nodes. Node 108A will transmit to node 108B, node108B will transmit to nodes 108A and 108C, and node 108C will transmitto nodes 108B and 108G. In this way each switch that has entered thetransfer process state will inform its nearest neighbors of itsprogress. It will be appreciated that, although the presently preferredembodiment employs communication between “nearest” neighbors,alternative embodiments may employ different node-to-node communicationpatterns consistent with the invention. Thus, in accordance with apresently preferred embodiment of the invention, each node can informother nodes of its state regardless of the physical layout of thedistribution system or the physical deployment of the nodes.

[0116] It will be appreciated that if the node is a multi-switch node,for the purpose of the transfer process only, a “nearest neighbor” maybe one of the switch positions within the node itself. In the preferredembodiment of the invention a nearest neighbor database is assembledfrom the information contained in the internal team database. Thetransfer logic is then executed using the information in the nearestneighbor database. If the node is a multi-switch node, separate nearestneighbor databases will be constructed for each switch position. In thepresent example, the nearest neighbor database consists of informationfrom the local node and the two nodes that are physically adjacent toit.

[0117] When node 108G receives the communication from node 108C, node108G will start the transfer process state. In general, when one nodereceives a communication from another node that the other node hasentered the transfer process state, the node receiving the communicationwill itself enter the transfer process state. This procedure allows thesystem to self organize, eventually putting each node of the system intothe transfer process state without requiring any communication from acentral office or any interaction with a human.

[0118] Furthermore, in the presently preferred embodiment, there neednot be any centralized control or logic center to decide what actionsare appropriate for each node to undertake at a given point in theprocess. Each node of the present invention can operate based only onits sensors and the information in the database. Due to this simpleoperating structure, the present invention can be easily expanded orreconfigured by simply reordering the nodes in the database without theneed to change the programming or logic of the present invention. Forexample, to add a new node between nodes 108B and 108C of FIG. 1, thesystem operator would physically insert the new node into the system atthe appropriate place and program it into the database between nodes108B and 108C. This is accomplished by moving the records for all of thenodes in the database after node 108B down one space and inserting therecord for the new node in this newly created space in the database.

[0119] Node 108G executes step 612, starts the end transfer processtimer, sets it to end at the same time as the node(s) that initiated thetransfer process, and then goes to step 616. Since node 108G controls aswitch that is normally open it will go to step 638. At step 638 node108G will observe its sensors, the information in its database, and theinformation sent to it by node 108C to determine whether it can close.In a presently preferred embodiment of the invention, the conditionslisted in Table 1 are checked by the node in order to determine if itcan close. The conditions used at step 4 in Table 1 are shown in Table2. Other sets of conditions could be used without departing from theinvention. TABLE I In order to close the normally open switch associatedwith a node, one valid closed switch and one valid open switch must bedetected as the adjacent switches associated with adjacent nodes oneither side of the normally open switch. The following rules, define theconditions that must be met for the normally open switch to validate thestate of adjacent switches. A normally open switch on the load side of afaulted line section may close for the purpose of restoring load if: 1.no error conditions exist 2. the adjacent fault side switch is open 3.the adjacent fault side switch did not detect a fault, but did see aloss of voltage 4. the current level seen by the adjacent fault sideswitch before the outage is within the bounds set in the local switch(The conditions used in this step are shown in Table 2.) 5. the adjacentnon-faulted side switch indicates it observed a voltage loss and/orfault but it is now closed, or the adjacent non-faulted side switch isthe normally open switch, or the adjacent non-faulted side switch is abreaker and voltage has been restored (this step is bypassed if thelocal switch is the normally open switch, no team reclosers exist on thealternate feeder, and voltage checking is disabled) 6. the “number ofsegments” that can be picked up is greater than zero. For this test, thenumber from the local record of the team database corresponding to thenon-faulted direction of supply (left or right) is used. 7. good voltageis detected on its voltage sensors (this test is a user-configurableoption). 8. the adjacent switches are in the proper logical operationstep

[0120] TABLE 2 (This Table elaborates on step 4 in tables 1 and 3) Inorder to determine whether load may be restored during a transferprocess, the process uses the total load to be transferred compared tothe capacity of the alternate circuit. Three basic set points are usedby an engineer to limit transferred load. They are: Capacity forTransfer (total feeder load N/A) Maximum Capacity for Transfer MaximumRated Feeder Capacity All three set points have settings for the leftfeeder and the right. All three also have summer and non-summer seasonsettings. The transfer process utilizes, if available, the real timetotal load on the associated feeders. This real time total load valuemay come over communications from any source such as a substation RTU.The two set points that work with this process are the “Maximum Capacityfor Transfer” and the “Maximum Rated Feeder Capacity”. The “MaximumCapacity for Transfer” is the configured amount of load that may betransferred to an alternate feeder when that feeder is lightly loaded.The “Maximum Rated Feeder Capacity” is used in combination with theactual real time load. The difference between these two is the presentreal time capacity the alternate feeder can handle. In order for atransfer to occur, the load that was reported to exist before thereconfiguration event began by the next open switch must be less thanboth the present real time capacity and the “Maximum Capacity forTransfer”. The real time load must be sent to the switch controls atleast once every 20 minutes. After 20 minutes past the last reception ofreal time load the value goes to undefined. An undefined value causesthe fall back process to take affect. This prevents old load data fromallowing transfers to occur when the source of this data fails to reportit. The fall back process uses the “Capacity for Transfer (total feederload N/A).” This value is intended to be a conservative value. Whenconfiguring this value the engineer should take into account averageloading, peak loading, and the emergency load capacity on the alternatefeeder. The engineer should feel comfortable that a transfer of thisamount of load can occur at any time and still be accommodated by thealternate feeder. Note that the process for the two feeders isindependent. Real time loading data may be provided for one feeder whilethe other feeder uses the conservative transfer process.

[0121] Assume that all of the conditions are met to allow the switch atnode 108G to be able to close. Through the use of the conditions listedin Tables 1 and 2, the node can determine on its own whether or not itcan close its associated switch. Additionally, only one message had tobe sent to enable node 108G to act to restore service—the message from108C. In the preferred embodiment of the present invention, and in thecase where the team includes protective devices such as breakers orreclosers, the normally-open switch is thus closed with the additionalassurance that the protective settings of all of the source-side teammembers have been preselected to handle the additional load. If theconditions were not met to allow the switch to be able to close, thennode 108G would go to step 640 and execute the synchronization and errorcheck routine. If an error is detected during this time then at step 642it is recorded and the transfer is stopped. Otherwise, at step 652 acheck is made to see if this is the first iteration of the loop. If itis the first iteration the local record is transmitted to the nearestneighbors at step 653. If it is not the first iteration then the processcontinues at step 638 to determine whether the normally open switch canbe closed.

[0122] If the normally open switch is unable to close at step 640 (asabove) and transmits its local record to its nearest neighbors, node108D will receive the notification and enter the transfer process stateat step 610. Node 108D will continue through the transfer process (steps612, 616, 618 as stated elsewhere) and since it is on the unaffectedportion of the circuit it will pass through step 644 and into step 645.

[0123] In the preferred embodiment, steps 645-651 provide an improvementin accordance with the present invention in that these steps are presentto notify and enable nodes that were otherwise unaffected by thetransfer event to adjust their protection settings to pick up additionalload during the transfer process. It would not deviate from the scope ofthis invention for the adjustments to include other settings oroperations related to switched capacitor banks, voltage regulators orother devices.

[0124] If node 108D is the last member of the team (only one neighborexists), it will calculate the segment count allowed in step 647 andtransmit its local record, including new segment count, to its neighborin step 649. Then, node 108D will enter step 632 where it will wait forthe transfer process to end, along with checking for errors in step 634.

[0125] If node 108D is not the last member of the team (it has twoneighbors), it will enter step 646 to transmit its local record to itsnearest neighbors. Before it can continue through the transfer process,it must receive a notification back from node 108E with 108E indicatingit has progressed into step 632 (node 108E has entered the transferprocess and followed the same process as node 108D). Until thatindication is received, node 108D will cycle through the error detectionstep 650. Once the data is received, node 108D can continue to step 647to calculate a new segment number, step 649 to transmit its local recordto its neighbors, and to the step 632 and step 634, looping until thetransfer process is complete.

[0126] Node 108G will receive the updated local record from node 108Dwhen node 108D has passed through step 649 and into step 632. Node 108Gcan now use this updated record to determine if it can close in step638. If node 108G is still not allowed to close it will continue withthe error detection loop which includes step 640. If node 108G isallowed to close, it will continue to step 626 to close its switch.

[0127] Otherwise, the node will continue to cycle between steps 638, 640and 650 until the switch can be closed, an error is detected, or the endtransfer process timer expires. It should be noted that in the case ofteams containing only sectionalizing switches without protectivecapabilities, the number of segments criteria will always be satisfiedwithout additional communication, and the only typical condition thatwould delay closing of the switch would be a wait for the other affectednodes to reach the correct transfer process state. This distinctionallows the support for profile modification in protective devices to beadded to prior reconfiguration products in a compatible manner.

[0128] Once node 108G determines that it can close, its associatedswitch it will proceed to step 626 and attempt to close it. Typically,such switches will have safety devices called lockout logic, as detailedabove during the discussion of sectionalization, that will force theswitch back open and keep it open if an anomaly such as a voltage lossis detected when the switch is closed. At step 628, the switchdetermines if the closing operation was successful. If it was not thenat step 624 an error flag is set and the transfer process is stopped. Ifthe close operation was successful, then power is restored to users 104Cand node 108G continues to step 630. At step 630, node 108G sends itsupdated record to its nearest neighbors, nodes 108C and 108D. Node 108Dnow enters the transfer process state, and as nodes 108A, 108B, and 108Cdid, node 108D will proceed down the flow chart to step 618 and send itsupdated record to nodes 108G and 108E. This will cause node 108E toenter the transfer process state and signal nodes 108D and 108F causing108F to enter the transfer process state and signal node 108E with itsupdated recorded.

[0129] As can be seen from the present example, one feature of theinvention is that from only the ordering of the nodes in the databaseand the rules of the flow charts, each node can determine theappropriate actions to take independently of actions taken by othernodes. Nodes do not command other nodes to take any given action, nor iscentral control or human intervention necessary to coordinate theresponse of the entire system. The decisions made by each node are basedsolely on information it has stored in its database and sensors attachedto it.

[0130] Nodes 108A, 108B, 108C, 108D, 108E, and 108F all will proceed tostep 644. Since the switches at nodes 108D, 108E, 108F are normallyclosed switches and they were not affected by the fault, they will besent to step 632 at step 644 and will wait for the process to time outwhile they perform the synchronization and error checking loop withsteps 634 and 636.

[0131] Since the switches at nodes 108A, 108B, and 108C were affected bythe event, they each proceed to step 620. In a presently preferredembodiment of the invention, the conditions listed in Table 3 arechecked by the node in order to determine if it can reclose. Theconditions used at step 4 in Table 3 are shown in Table 2. Other sets ofconditions could be used without departing from the invention.

[0132] If these switches cannot be reclosed, then, the nodes will go tostep 622 and perform synchronization and error checking. In thepreferred embodiment if an error is detected, then in step 624 a flagwill be set, and the transfer process state will be stopped. It will beappreciated that in other implementations of the invention error flagsmay cause different results. In one example, error flags may beprioritized so that lower priority errors may not stop the transferprocess.

[0133] If no error was detected at step 622, at step 654 the number ofsegments that can be picked up is recalculated using the rules forcalculating the number of segments field during transfer events. If theresult of this recalculation may allow the normally closed switch toreclose, at step 620 the logic will exit from the loop and reclose theswitch at step 626. Otherwise, each node will cycle through steps 620,622 and 654 until the switch can be reclosed or the process timerexpires. TABLE 3 In order to reclose the normally closed switchassociated with a node, one valid closed switch and one valid openswitch must be detected as the adjacent switches associated withadjacent nodes on either side of the normally closed switch. Thefollowing rules define the conditions that must be met for the normallyclosed switch to validate the state of adjacent switches. A presentlyopen switch on the load side of a faulted line section may close for thepurpose of restoring load if: 1. no error conditions exist 2. theadjacent fault side switch is open 3. the adjacent fault side switch didnot detect a fault, but did see a loss of voltage 4. the current levelseen by the adjacent fault side switch before the outage is within thebounds set in the local switch (The conditions used in this step areshown in Table 2.) 5. the adjacent non-faulted side switch indicates itobserved a voltage loss and/or fault but it is now closed, or theadjacent non-faulted side switch is the normally open switch, or theadjacent non-faulted side switch is a breaker and voltage has beenrestored 6. the “number of segments” that can be picked up is greaterthan zero. For this test, the number from the local record of the teamdatabase corresponding to the non-faulted direction of supply (left orright) is used. 7. the adjacent switches are in the proper logicaloperation step

[0134] A normally closed switch on the source side of a faulted linesection may reclose if:

[0135] a. no error conditions exist

[0136] b. the adjacent fault side switch is open

[0137] c. the adjacent fault side switch detected a fault

[0138] d. the adjacent non-faulted side switch indicates it saw avoltage loss and/or fault but it is now closed, or the non-faulted sideis the breaker and voltage has been restored

[0139] e. the adjacent switches are in the proper logical operation step

[0140] Through the use of algorithm of Tables 2 and 3, a node candetermine on its own whether or not it can close its associated switch.Assume that all of the conditions are met to allow the switch at node108C to be able to reclose its switch. The switch will then be reclosedat step 626.

[0141] At step 628, node 108C will determine if the switch wassuccessfully reclosed. If it was not, then an error flag is set and thetransfer process is stopped in step 624. If the switch was successfullyreclosed, then the node proceeds to step 630 and informs its nearestneighbors, nodes 108B and 108G, of its progress by sending them anupdated version of its record. Node 108C then enters the loop betweensteps 632 and 634 where it performs the synchronization and errorchecking routine while it waits for the end transfer process timer totime out. If an error is detected, step 636 is executed and a flag isset and the transfer process is stopped. An example of an error is ifthe lockout logic causes a switch to reopen.

[0142] As the above discussion and rules indicate, one benefit of apreferred embodiment of the present invention is its ability to operateby systematically closing only one switch at a time so that the load tothe system is brought on line gradually, one segment at a time. Thishelps ensure that the power source will not be overloaded due to toorapid an increase in demand.

[0143] When node 108B receives the communication from node 108C, assumethat node 108B will have enough information to know that according tothe conditions listed in Table 3, it should not close since node 108Adetected a fault and node 108B did not. This must mean that the faultwas between nodes 108A and 108B. Therefore, node 108B will cycle betweenstates 620 and 622 until an error is detected or the end transferprocess timer expires. Node 108A, since it has detected a fault, willalso not be allowed to close and will cycle though steps 620 and 622until an error is detected or the process timer times out.

[0144] When the end transfer process task timer times out, the nodeswill all return to step 310 of FIG. 3 and resume synchronization, errorand integrity checks until the original fault is repaired. If the faultis repaired, the system will enter the return to normal process state ofFIG. 7 discussed below. If another fault occurs before the previous onehas been corrected, it would not deviate from the present invention forthe system to re-enter the transfer process state and again recloseswitches to return service to as many users as possible.

[0145] Return to Normal Process State

[0146] After a fault has occurred or if for any other reason thedistribution network switches have been put in states other than theirnormal operating states, for example after the transfer process hascompleted, the return to normal process state can return the system toits normal operating configuration. This process can also be used toreconfigure the distribution system to any desired system set up of openand closed switches without deviating from the present invention. In theexample used above, once the fault in distribution line 106 has beenrepaired or cleared and switch 108A has been manually reclosed, powerwill be restored to users 104A. At this point, node 108B will sense thatnormal voltage has been restored to the distribution line between nodes108A and 108B and it will be triggered to enter the return to normalprocess state after node 108B has detected stable 3 phase voltage on thechannel for a predetermined time and no errors exist and the normallyopen switch has not detected a fault. Once any switch in the system hasentered the return to normal state, it will signal all other switches toenter the return to normal state.

[0147] In the preferred embodiment of the invention, a node withoutvoltage sensors on the normal source side of the switch may useinformation from the nearest source side neighbor to determine ifvoltage has been restored. To do this, the node assumes that voltage hasbeen restored if the nearest source side neighbor node has a closedswitch and is detecting good voltage. The local node must see thiscondition continue for a predetermined time to validate that voltage hasreturned.

[0148] In another embodiment of the invention the, return to normalprocess can be triggered on demand by an external device or human. Itwill be appreciated that this on demand activation of return to normalcan be used for, but not limited to, starting the return to normalprocess before the predetermined time has elapsed, or as a one stepmethod of return to normal without manually closing any team switches.

[0149] The return to normal process can occur in one of two methods, anopen transition or a closed transition. As is well known by thoseskilled in the art, an open transition is one in which the source ofsupply of power to users is interrupted in the process of switchingbetween alternate sources of supply. For instance, in this example, iftie switch 108G was opened up before switch 108B was closed then users104B and 104C would momentarily lose power. This would be an opentransition. In a closed transition, switch 108B is closed before switch108G is opened and users 104B and 104C do not lose power. The systemoperator can configure the system to operate in either an open or closedtransition mode.

[0150] During a closed transition, the normally open device must reopenfollowing the allowed transfer time whether it has heard from thenormally closed but presently open device or not. This is done toprevent the parallel of lines for an extended period of time. Also, ifthe node with the normally open switch detects that a parallel conditionexists before the return to normal process has begun, the node willbegin the return to normal process and open its switch to break theparallel.

[0151] It is well known by those skilled in the art that the reliabilityof the closed transition return-to-normal sequence is greatlyfacilitated if the automated logic can adjust the settings of theprotective devices on the circuit just before and just after executingthe closed transition. These adjustments include but are not limited toblocking and unblocking the ground fault detection on nodes that act asprotective devices. Thus, it is an object of the present invention toprovide the means to coordinate these adjustments with the closed,return-to-normal transition, as outlined below.

[0152] At step 712, the node starts the end transfer process task timer.Each node will use the same start time for its end transfer processtimer. This timer ensures that the system does not spend too much timeattempting to execute the return to normal process. The timer is set torun for a predetermined time set by the system operator. In oneembodiment, this timer is set to run for one minute. The node nextexecutes step 716. Since nodes 108A-F are normally closed switches, eachof these nodes continues on to step 718. 4

[0153] Switches 108D-F are normally closed switches that were not openso they will each go to step 750, where if the transition method isclosed the nodes will continue to step 751 to perform actions that willprepare them for the closed transition. The nodes then continue to step730 and perform a synchronization and error checking loop while theywait for the process to end. If the transition method is open, the nodewill simply progress from step 750 to step 730 to perform thesynchronization and error-checking loop.

[0154] Switches 108A and 108C are normally closed switches that werereclosed by the transfer process so each of these nodes will also go tostep 750, where if the transition method is closed the nodes willcontinue to step 751 to perform actions that will prepare them for theclosed transition (as stated previously). The nodes then continues tostep 730 and performs a synchronization and error checking loop whilethey wait for the process to end. If the transition method is open thenodes will simply progress from step 750 to step 730 to perform thesynchronization and error checking loop.

[0155] Node 108B is a normally closed switch that is open so it moves onto step 720 to determine if it is an open transition.

[0156] Assume the system operator set the system to undergo a closedtransition. Then, node 108B goes from step 720 to step 752 to performactions that will prepare it for the closed transition (as statedpreviously), then to step 722. If the normally open switch, 108G, isarmed to reopen (see below), the switch on the supply side of switch108B, switch 108A, is closed, and communication of the initial startreturn to normal process message was successful to all members of theteam, then node 108B will continue on to step 724 and close its switch.The requirement of the reply to the initial start return to normalprocess message insures that all nodes within the team have preparedthemselves for the closed transition state. The normally open switch isarmed to reopen when it has entered the return to normal process, themethod used will be a closed transition, and it has informed all othernodes in the team of its state, as will be seen in greater detail below.

[0157] If the normally open switch is not armed, or the supply sideswitch is not closed, or the initial start return to normal processmessage has not yet been successfully sent to all team members, thennode 108B will perform a synchronization and error-checking loop andreturn to step 722. This loop will continue until either all conditionsare met or the end transfer process timer expires.

[0158] If the switch is closed at step 724, then at step 726 the nodechecks to see if the switch is closed. The switch could have beenreopened by lockout logic or any other safety feature on the switch thatmight force it back open. If the switch is closed then at step 728, thenode will inform its nearest neighbors and the normally open switch,108G, by sending them an updated version of its record. The node thengoes to step 730 where it performs the synchronization and errorchecking loop while waiting for the end transfer process timer to timeout. If the switch is not closed at step 726, then at step 732 an errorflag is set and at step 734 the node informs all other nodes that anerror has occurred and the node then goes on to step 730.

[0159] If the system is set to undergo an open transition, then at step720, the node will go to step 746. If the normally open switch is openand the supply side switch, switch 108A, is closed then the node willcontinue on to step 724. If either of these conditions is not met, thenthe node will perform a synchronization and error-checking loop betweensteps 744 and 746.

[0160] Switch 108G is a normally open switch so at step 716 it willproceed to step 736. If the system is undergoing a closed transition,the node goes to step 753 to perform actions that will prepare it forthe closed transition (as stated previously), then to step 754 where itwill arm itself to open and send its local database record to all otherteam members, and then to step 738 where if all the other switches areclosed, node 108G will open the normally open switch at step 740. Thenode will then check if the switch is actually open at step 742. If theswitch is open it will send its updated record to all the nodes at step734 and then enter the loop at step 730 and wait for the process timerto end. If the switch is not open at step 742 then an error flag will berecorded at step 732 and the node will proceed to step 734.

[0161] At step 738, if all the other switches were not closed, then thenode will loop to step 744 and perform synchronization and errorchecking and look back to step 738. This loop continues until all theswitches are closed, an error is recorded or the timer expires.

[0162] If the system were programmed to undergo an open transition, thenat step 736 node 108G would not look to see if other switches wereclosed and it would skip to step 740, open the switch and continue theflow chart from that step.

[0163] End Process Timer Task

[0164] Whenever a node enters either the transfer process or the returnto normal process, the node starts the end process timer task. The flowdiagram for this task is show in FIG. 8. At step 812 the node loopsuntil the timer expires. The timer is initiated when the node enters thetask and from the information sent to the node by other nodes, each nodewill know the time at which the first node to enter the task in questionbegan the task. In this way, all of the nodes can set their end processtimers to expire at the same time. It would not deviate from theinvention to have the end process task timer be of different durationsfor the transfer process and the return to normal process.

[0165] Once the timer expires, the node will stop the process it is inat step 814. At step 830, if the process that was stopped was a closedtransition return to normal event, the node will continue to step 831 toreturn settings that were changed to prepare for the closed transition(for example unblocking the ground relay if applicable). It should beappreciated by those skilled in the art that the reset of the closedtransition settings could also be accomplished after step 734 or at anytime when the normally open switch has been verified to be successfullyreopened. From both step 830 and 831, the node will continue to step 816and look to see if the switch is in the proper position for the end ofthe process that was stopped. For example, is the switch in its normalposition at the end of the return to normal state. If the switch is notin the correct position, then step 818 is executed and an error flag isset and the node returns to the synchronization process at step 820.

[0166] If the node's switch is in the correct position then at step 816,the node goes to step 822 and checks to see if the circuit is in thenormal configuration. If it is, then the node goes to step 820. If it isnot in the normal configuration, then the node goes to step 824 andchecks if the return to normal is enabled. If the system does not havethe return to normal enabled it will go to step 826 and change itsoperation state to no operation and wait for further instructions beforeit can re-enter the ready to transfer state. From step 826, the systemwill go to 820.

[0167] If the return to normal is enabled then at step 828, the nodechanges its operation state to ready for return to normal and thenproceeds on to step 820.

[0168] Sideline Team Nodes

[0169] As will become apparent to those skilled in the art, the use ofthe sideline team node in accordance with the present invention expandsthe capability of the method and apparatus to operation of more complexcircuit topologies and more diverse sources of data.

[0170] The sideline team node may be distinguished from active teamnodes mentioned previously in two ways; 1) the sideline team node is notactive within the synchronization and integrity check process, 2) thesideline team node does not itself directly execute a process associatedwith the reconfiguration process described previously. Instead, thesideline team node is used by an active team node to acquire additionaldata about the environment around the team. This data can then be usedto alter the process within the team. This will become clear with theuse of two examples below.

[0171] It will be recognized by those skilled in the art that the methodfor acquiring the additional data will usually involve datacommunications. This may be achieved using various communicationstechnologies for point-to-point communications or may be achieved bysharing the same communication infrastructure used by the teamcommunication channel, 110. In addition, in the case of dual or multipleswitch nodes, the communication step may be bypassed entirely.

[0172] In the preferred embodiment of the present invention, each activeteam node may be responsible for one sideline team node. The addressingof sideline team nodes is contained within a table similar to thedatabase of node records. The address data for the sideline team node iscontained in the record with the same device number as the record in thedatabase of node records for the active team node that is responsiblefor the sideline node. Other means for storing sideline team nodeaddressing is also possible without deviating from the intent of thepresent invention. For example, it would also be consistent with thepresent invention for the table storing sideline node information toinclude identifiers that would specifically associate a sideline teamnode with an active team node, thereby allowing the number of sidelineteam members per active team node to be greater than one.

[0173] With reference now to FIGS. 9 and 10, the following are twoexamples of uses of the sideline team node. Those skilled in the artwill recognize that S1-3, (901, 902, 904, 1001, 1002) are all sources ofsupply for the circuits. Nodes 903A, 903C, 1003A, 1003C, 1003D and 1003Eare all normally closed switches. Nodes 903B, 903D and 1008B are allnormally open switches. It will be obvious to those skilled in the artthat these simple examples were chosen for the purpose of illustratingthe possible uses of sideline team nodes, and that much more complexapplications are possible. For example, it would be consistent with thepresent invention to utilize sideline team node communications to allowmultiple teams to interact in order to reconfigure circuits with morethan two possible sources.

[0174] The data available from the sideline team members could also bemore complex. This data could include protection data such as presentload readings, maximum available load current, etc. to prevent animpermissible amount of load to be picked up, power quality data such asvoltage or harmonic content that could also be used to block transfer ifit would negatively impact customers on the alternate source, or otherdevice-specific data such as abnormal conditions in the sideline nodecontroller.

[0175] The first example refers to sideline node 903C and team nodes903A and 903B in FIG. 9. Team node 903B is responsible for collectingdata from sideline node 903C, and using that data to make decisionsabout the operation of the team. In this example, the circuit containingteam nodes 903A and 903B is normally fed from source 901, and uses themid-point of circuit fed from source 902 as its alternate source suchthat if 903A were to be opened by a reconfiguration event, and 903Bclosed, the load served between nodes 903A and 903B would be fed fromthe alternate source 902.

[0176] It is important to note for the purpose of this example thatsource 904 is not capable of handling the additional load between 903Aand 903B if node 903D were closed and 903C were open, and areconfiguration event were to occur. For this reason the data that 903Bretrieves from 903C is used to determine the alternate source that ispresently available. If 903B finds that 903C is closed, source 902 mustbe the present alternate source, therefore, the load between 903A and903B could be transferred to the alternate source if necessary. If 903Bfinds that 903C is open, source 904 would be the present alternatesource, therefore a reconfiguration event can not be allowed.

[0177] This logic is illustrated in the flow diagram in FIG. 9. Thesteps in this flow diagram are executed in parallel to, but notconnected with, the synchronization and integrity check process runningin node 903B. It is assumed that upon start of the node's logicexecution that a sideline node has been configured into the sidelinetable in node 903B. Node 903B begins polling the sideline node at step921. With the data retrieved node 903B checks whether the sideline nodeis closed at step 922. If the sideline node is not closed, or the closedstatus of 903C cannot be positively verified for any reason, the logicproceeds to step 923 to set a flag to prevent automatic circuitreconfiguration from occurring. It will be appreciated by those skilledin the art that the polling loop, 921-926 could be replaced by aspontaneous report by exception scheme or other means to acquire thestate of 903C, subject to the restriction that the data must be acquiredand validated within a period of time comparable to the configurablepolling delay referred to at 926.

[0178] If in step 922 it is found that the sideline node is closed, node903B continues to step 924 where if the flag to prevent reconfigurationsis set, it can be cleared in step 925, otherwise no further action isrequired. In all cases, node 903B will go to step 926 to wait apreconfigured amount of time before going back to step 921 to begin thepolling cycle again.

[0179] It will be appreciated by those skilled in the art that if nodes903C and 903D were themselves a switch team, node 903B could be used asa sideline node off of either node 903C or node 903D. In this way eachof the two teams could prevent the other team from automaticallyreconfiguring its circuit if either team was already in a reconfiguredstate. It can also be appreciated that as teams grow in nodes, many moreinterconnection possibilities arise, each being consistent with thepresent invention.

[0180] The second example refers to FIG. 10 with nodes 1003A, 1003B,1003C and 1003D comprising a switch team being fed from sources 1001 and1002. Additionally, node 1003E is a sideline node (a simple, SCADAoperable switch with fault detectors) installed on a tap line that feedsto a dead-end. Sideline node 1003E is contained in the sideline table ofnode 1003D such that node 1003D is responsible for retrieving data fromnode 1003E and using the data to enhance team operation.

[0181] In the present example, the settings of the breaker at source1002 are configured such that the breaker will go to lockout on thethird operation. It is also desirable to prevent any switches fromopening on the first operation of the breaker to allow temporary faultsto clear. This implies that nodes 1003C and 1003D must open theirswitches after the second operation in order for the fault to becleared, a reconfiguration to begin, and as much of the load to bepicked up as possible.

[0182] If a permanent fault were to occur on the line between 1003E andthe end of the line, source breaker 1002 would operate twice, afterwhich nodes 1003C and 1003D would open to begin the reconfigurationprocess. As described earlier, node 1003B would close into open node1003C, the breaker would close into open node 1003D, leaving the faultapparently isolated between nodes 1003C and 1003D.

[0183] In this example, the execution of the logic associated with thesideline node is performed after the transfer event has completed. Afterthe transfer event, node 1003D will poll sideline node 1003E for data.This data will include the indication of a fault past sideline node1003E. Knowing the normal configuration of the circuit, and the morespecific location of the fault, node 1003D can further isolate the faultby sending a command to sideline node 1003E to open its switch. Uponverification that the sideline node's switch is open, node 1003D canautomatically begin the return to normal process, restoring load to thecustomers bordered by the three nodes 1003C, 1003D and the now open node1003E.

[0184] This logic is illustrated in the flow diagram in FIG. 10. Asstated previously, the logic is only executed following the end of areconfiguration event, and before a return to normal event. After thereconfiguration event the node enters the logic and polls the sidelinenode at step 1021. If the data retrieved indicates that no fault wasdetected by the sideline node at step 1022, or any other abnormalcondition is detected such that the location of the fault cannot beverified to be on the load side of 1003E, the node proceeds to 1023 toend the logic. If a fault was detected at step 1022, the node thendetermines if the sideline node is presently open in step 1024. If thesideline node is not presently open, the node continues to step 1025 towhere it sends an open command to the sideline node. The node then againchecks if the sideline node is open in step 1026 and if not can stop thelogic at step 1027, or optionally retry the open command. If thesideline node is now open at step 1026, it will continue to step 1028where it will signal the return to normal logic to begin. If the nodewere to find the sideline node 1003E initially open at step 1024, itwould immediately continue to step 1028 to signal the return to normallogic. In both cases, this logic ends at step 1029 after the return tonormal logic has been signaled.

[0185] It can be seen by those skilled in the art that numerous otherpossible circuit configurations are possible using this form of sidelinenode logic while remaining consistent with the present invention.Neither the number of nodes in a team nor the complexity of the circuitaffect the use of this logic. For example, it will be appreciated thatnode 1003E can be associated with an automatic sectionalizer, containedin another team, or backed up by an alternate source without deviatingfrom the present invention.

[0186] Protective Device Add-On Board

[0187] In the preferred embodiment of the present invention, the methoddisclosed above is incorporated into the operating instructions orstored program of the team node controller 200. Alternate embodiments inthe form of microprocessor-based add-on boards support retrofit ofproducts configured according to existing, prepackaged line reclosercontrols and substation breakers.

[0188] A block diagram of the recloser version of the add-on board isshown in FIG. 11. The board consists of a small electronicmicroprocessor-based circuit board, which can be provided for mountinginside an existing recloser control cabinet, or in a nearby auxiliarycabinet. The power for the board is supplied by the recloser's powersupply/battery backup system 1104. The team reconfiguration logic isentirely contained in the memory 1105 and CPU 1106 of the add-on board,while the circuit protection logic and active switching functions remainin the recloser control. Thus, the addition of the team reconfigurationlogic disclosed herein can be performed without modification to thelogic or functionality of the recloser. The interface between the add-onboard and the recloser is based entirely on digital communications. Itis well-known to those skilled in the art that many of the modern,microprocessor-based recloser controls (including those mentioned in thebackground section) support well-defined digital communicationsprotocols such at DNP 3.0 and Pacific Gas and Electric Protocol in sucha way as to allow the recloser functions to be selected, controlled andmonitored over a communication port. This port is provided as part ofthe recloser control. The specific data values, status points, andcontrol outputs that can be exchanged over communications are typicallyprovided as predefined “points lists” by the designer or provider of therecloser.

[0189] In light of the functionality provided by the recloser and itscommunication interface, the functions of node controller of FIG. 2 canbe partitioned between the add-on board and the retrofit reclosercontrol as follows: The team communication functions 110, 218, 220 areprovided by one or two of the communication channels 1101 and 1102 onthe add-on board. The third channel, 1103 is used to communicate withthe recloser. The team coordination logic performed by 208 and 210including maintenance of the team database 210 is performed by theprocessor 1106 and memory 1105 of the add-on board. The node's userinterface for team functions 209 remains with the add-on board 1107,while the recloser's user interface can still be used for accessing itsstandard functions. All of the recloser protection features includingovercurrent fault detection 212, switch monitoring and control 216 areutilized, with the add-on board receiving status from all of thesefeatures over communications. Supervisory control over the recloser'sassociated switch (breaker) is provided to the add-on board via thecommunication protocol. Power management and battery backup 1104 must beprovided separately for the additional add-on board/communicationequipment, although this may in some circumstances be shared with therecloser's power supply 222.

[0190] In circumstances where the team logic requires interaction withdata stored or processed in the recloser, the recloser point list isutilized. The presence of overcurrent faults, line voltage and othersensed or derived parameters are all readily obtainable in this manner.For example, load data required to support load pickup at steps 620 and638 can be periodically sampled by the recloser, transferred to theadd-on board using the point list and averaged inside the add-on board.

[0191] An additional benefit of the add-on board is its ability toextend the capabilities of the recloser's basic functions. For example,the Cooper Form 4C recloser supports only two protection profiles.Because of the additional storage and processing capabilities of theadd-on board, additional profiles can be stored in the add-on board andloaded into the recloser when needed. In addition, the extensions to therepresentations of protection profiles presented in this invention canbe applied uniformly to all retrofit reclosers without regard to thecapabilities of the individual device.

[0192] Yet another embodiment of the add-on board is provided byincluding the optional analog and digital I/O block 1108. Thisembodiment could be utilized for interfacing to a substation breakerlacking an adequate digital communication capability to support the teamfunctions. The digital I/O would then be connected to the breaker'sstatus and override control points. The analog I/O would be connected tocurrent and voltage sensing devices to allow the node to provide theload and voltage monitoring functions of a team member. The breaker'sprotection profile would be dictated by the breaker's independentsettings and configured into the memory 1105 of the add-on board. Thoseskilled in the art will recognize that many possibilities exist forsupporting team functionality in legacy or retrofit devices.

We claim:
 1. A method for controlling the configuration of an electricalpower distribution system having a plurality of distribution devicesincluding circuit opening and closing functions, at least one of theplurality of distribution devices being a circuit protective devicehaving selectable protection characteristic profiles, the methodcomprising the steps of: responding to detected conditions requiringreconfiguration of the system and opening one or more of thedistribution devices to isolate the detected condition; communicatinginformation between each of the plurality of distribution devices and atleast one other of the plurality of distribution devices includingrequired protection characteristics; selecting one of the selectableprotection characteristic profiles of the at least one circuitprotective device; and controlling operation of the plurality ofdistribution devices to reconfigure the electrical power distributionsystem.
 2. The method of claim 1 further comprising the step ofrestoring the distribution system to a normal configuration based on thedetection of predetermined conditions that represent a resolution of thedetected condition requiring reconfiguration, said restoring stepincluding the selection of one of the selectable protectioncharacteristic profiles of the at least one circuit protective device.3. The method of claim 1 wherein said controlling step includesreconfiguring based on the available protection characteristics.
 4. Asystem for controlling the configuration of an electrical powerdistribution system comprising: a plurality of distribution deviceshaving circuit opening and closing functions, at least one of theplurality of distribution devices being a circuit protective devicehaving modifiable protection characteristics; and control meansresponding to detected conditions requiring reconfiguration of thesystem, communicating information between each of the plurality ofdistribution devices and at least one other of the plurality ofdistribution devices to facilitate the coordination of protectioncharacteristics and the modifiable protection characteristics, andcontrolling operation of the plurality of distribution devices toreconfigure the electrical power distribution system.
 5. The system ofclaim 4 wherein the control means coordinates the protectioncharacteristics before operating the distribution devices to reconfigurethe system.
 6. The system of claim 4 wherein the control meansreconfigures the system based on the available protectioncharacteristics.
 7. A system for controlling the configuration of anelectrical power distribution system comprising: a plurality ofdistribution devices arranged in the distribution system including atleast one circuit protective device having modifiable protectioncharacteristics, said distribution devices including facilities foropening and closing circuit paths in the distribution system; andcontrol means responsive to first sensed conditions for coordinating areconfiguration of the distribution system via the plurality ofdistribution devices, the control means comprising means for modifyingthe protection characteristics of the at least one circuit protectivedevice based on the communication of required protection characteristicsfrom one or more of the distribution devices.
 8. The system of claim 7wherein the control means further comprises circuit protective devicecommunicating means for communicating modified protectioncharacteristics to one or more of the distribution devices anddistribution device means for operating to reconfigure the distributionsystem upon the receipt of the modified protection characteristics thatsatisfy predetermined reconfiguration protection.
 9. The system of claim7 wherein said control means comprises first means for selectivelyoperating appropriate ones of a first type of the distribution devicesto open upon detection of the first sensed conditions and second meansfor selectively operating appropriate at least one of a second type ofthe distribution devices to close to reconfigure the distributionsystem, appropriate respective distribution devices of the first typebeing reclosed after the appropriate respective distribution devices ofthe second type close based on predetermined conditions being satisfiedfor reconfiguration.
 10. The system of claim 9 wherein the first sensedconditions for reconfiguration correspond to a fault condition and thefirst and second means operate to reconfigure the distribution system toisolate the fault condition.
 11. The system of claim 7 wherein saidcontrol means is responsive to second sensed conditions representing aresolution of the first sensed conditions to restore the distributionsystem to a normal configuration.
 12. The system of claim 11 whereinsaid control means modifies the protection characteristics of the atleast one circuit protective device to a normal configuration whenrestoring the distribution system to a normal configuration.
 13. Thesystem of claim 11 wherein said control means during reconfigurationmodifies the protection characteristics of the at least one circuitprotective device to a second protection characteristic from a firstnormal configuration protection characteristic, and during restoring thedistribution system to a normal configuration first modifies theprotection characteristics of the at least one circuit protective to athird protection characteristic before achieving the normalconfiguration and modifying the protection characteristic of the atleast one circuit protective device to the first normal configurationprotection characteristic.
 14. The system of claim 7 wherein saidcontrol means comprises communication means for coordinating protectioncharacteristics with distribution devices that are not affected by thefirst sensed conditions.
 15. The system of claim 7 wherein thecommunication of required protection characteristics is represented bymeasured load current.
 16. The system of claim 7 wherein thecommunication of required protection characteristics is represented by anumber of segments each of which corresponds to the section of thecircuit between adjacent distribution devices.
 17. The system of claim16 wherein the communication of required protection characteristicsadditionally includes the number of segments for each direction ofcurrent flow in the distribution system.
 18. The system of claim 7wherein the communication of required protection characteristics isrepresented by the estimated load current at each of the distributiondevices.
 19. The system of claim 7 wherein the communication of requiredprotection characteristics is represented by the maximum load current ateach of the distribution devices.
 20. A system for controlling theconfiguration of an electrical power distribution system comprising: aplurality of distribution devices arranged in the distribution systemincluding at least one circuit protective device having modifiableprotection characteristics, said distribution devices includingfacilities for opening and closing circuit paths in the distributionsystem; and control means for coordinating changes in the configurationof the distribution system via the operation of the distributiondevices, the control means comprising first means for selectivelymodifying the protection characteristics of the at least one circuitprotective device based on the communication of required protectioncharacteristics from one or more of the distribution devices.
 21. Thesystem of claim 20 wherein the control means operates one or more of theplurality of distribution devices to provide fault isolation andreconfiguration of the distribution system in response to firstpredetermined sensed conditions and to provide restoration of thedistribution system to a normal configuration in response to secondpredetermined sensed conditions, the first means during the restorationto a normal configuration modifying the protection characteristics ofthe at least one circuit protective device both before and after therestoration to the normal configuration.
 22. The system of claim 21wherein the modifying of the protection characteristic of the at leastone circuit protective device comprises blocking of a ground faultprotection characteristic before restoration and unblocking of theground fault protection characteristic after restoration.
 23. The systemof claim 20 wherein the first means selectively modifies the protectioncharacteristic of the at least one circuit protective device each timethe control means coordinates changes in the configuration of thedistribution system.
 24. A method for controlling the configuration ofan electrical power distribution system having a plurality ofdistribution devices including circuit opening and closing functions,the method comprising the steps of: responding to detected conditionsrequiring reconfiguration of the system and opening one or more of thedistribution devices to isolate the detected condition; communicatinginformation between each of the plurality of distribution devices and atleast one other of the plurality of distribution devices; at least oneof the plurality of distribution devices communicating with at least onedevice external to the plurality of switch controllers to obtainadditional information about the condition of the system that is used tocontrol reconfiguration; and controlling operation of the plurality ofdistribution devices to reconfigure the electrical power distributionsystem.
 25. A system for automated reconfiguration of a distributionsystem, comprising: a first plurality of switches, switches in the firstplurality of switches being located in the distribution system; a firstplurality of switch controllers; and switch controllers in the firstplurality of switch controllers controlling respective switches in thefirst plurality of switches and including resources which monitor thedistribution system, which communicate information with at least oneother switch controller in the first plurality of switch controllers andwhich control operation of their respective switches to perform faultisolation or reconfiguration based on the detection of conditionsrequiring fault isolation and the communicated information, at least oneof the switch controllers also communicating with at least one externaldevice external to the first plurality of switch controllers to obtainadditional information about the condition of the system that is used tocontrol reconfiguration.
 26. The system of claim 25 wherein at least oneof the switch controllers communicates with at least one external deviceto control operation thereof.
 27. The system of claim 25 wherein the atleast one external device is at least one of a second plurality ofswitches located in the distribution system.
 28. The system of claim 25wherein the at least one external device also communicates with at leastone of a second plurality of switch controllers.
 29. A system forcontrolling the configuration of a distribution system, comprising: aplurality of switches being arranged in a predetermined configuration ina distribution system; and a plurality of switch controllers beingarranged to control respective switches in the plurality of switches,each of the switch controllers being responsive to sensed conditions ofthe distribution system and comprising means for communicatinginformation to one or more other of the plurality of switch controllersso as to transmit and receive communicated information about the statusof the one or more switch controllers, each of the switch controllers inthe plurality of switch controllers processes the sensed conditions andthe communicated information in order to determine whether to operatetheir respective switches according to first predetermined conditions toperform fault isolation, thereafter to determine whether to operatetheir respective switches according to second predetermined conditionsto perform reconfiguration of the distribution system and thereafterdetermining whether to perform a return to a normal configuration basedon a resolution of the conditions requiring fault isolation andreconfiguration, at least one of the switch controllers communicatingwith at least one device external to the plurality of switch controllersto receive information about the condition of the system from andcontrol operation of the at least one device to perform the functions ofreconfiguration and/or a return to normal configuration.
 30. A systemfor controlling the configuration of an electrical power distributionsystem comprising: a plurality of distribution devices having circuitopening and closing functions; and control means responding to detectedconditions requiring a reconfiguration of the system, communicating withat least one external device external to the plurality of distributiondevices to obtain additional information about the condition of thesystem that is used to control a reconfiguration, communicatinginformation between each of the plurality of distribution devices and atleast one other of the plurality of distribution devices, andcontrolling operation of the plurality of distribution devices toreconfigure the electrical power distribution system.